Candidate records pushed through the Partner API (/api/partner/v1/candidates) follow the same rules as a recruiter CSV import.
Every API call creates an import batch with your account recorded as the importer — you attest a lawful basis for processing the submitted records, exactly like ticking the attestation boxes on a CSV upload. Re-pushing an existing email never overwrites data the candidate provided themselves; it only enriches empty fields and attaches the new batch for auditability.
API keys are managed in the Integration Studio (/admin/integrations/studio), stored only as SHA-256 hashes, and revocable instantly. Full reference: /developers.
Posting and reviewing are free. Every stage, e-mail and export described here is in the console from the first sign-in.